a18c1d3ce197164f7d9de0c1c667e00b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a18c1d3ce197164f7d9de0c1c667e00b_JaffaCakes118
Size

12KB
MD5

a18c1d3ce197164f7d9de0c1c667e00b
SHA1

e91aa32b7abc015663c1e88a9d5ac1c7608dd88f
SHA256

a3e0dd308e963e8df281737c82a9c0d0d925e6ce2086f51f79a5a61f9081546a
SHA512

35fe1767427960f87fc63f746ad4ab8ff48c15c743335c1046bb175e684d45741f8101474f19f85834a517f298c4d7135a84da7cb308b3aed14aacb3fbfe340f
SSDEEP

96:n/10J58uvz7RCbNMCBGEHHKJ/Yw+nThZhFTjziOWDEP2:9Oy03RG7BGEH4/ghWgP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a18c1d3ce197164f7d9de0c1c667e00b_JaffaCakes118

Files

a18c1d3ce197164f7d9de0c1c667e00b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4d118a15286e29d23b98c75fab68745

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord570
ord576
ord100

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ